How do I protect my account with two-factor authentication?
Updated Oct 7, 2026
Turn on two-factor authentication under Account → Security and scan the QR code with an authenticator app. You can also review and revoke active sessions there.
Go to Account → Security and enable two-factor authentication. Scan the QR code with an authenticator app (any TOTP app works, such as Google Authenticator, 1Password or Authy) and enter the 6-digit code to confirm. From then on, signing in requires your password plus a code from the app.
On the same page you can see your active sessions and revoke any you don’t recognise.
Other protections are already in place: passwords are hashed with argon2id and login attempts are limited. Use a strong, unique password as well.
Was this article helpful?
Thanks for the feedback! Still stuck? Contact support